The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from external news platforms, creating a potential surface for indirect prompt injection if those sources contain adversarial content.
Ingestion points: references/newsjacking.md instructs the agent to fetch data from Google News, Hacker News, and Reddit.
Boundary markers: The skill does not define specific boundaries or instructions to ignore potential commands within the fetched external content.
Capability inventory: The skill utilizes shell capabilities including curl, jq, and xmllint to retrieve and parse data.
Sanitization: There are no explicit instructions to sanitize or validate the external content before it is processed by the agent to generate pitch angles.
[COMMAND_EXECUTION]: The skill includes shell command snippets in references/newsjacking.md for fetching and parsing news data.
Evidence: Shell pipes using curl, jq, and xmllint are provided as part of the newsjacking workflow.
[EXTERNAL_DOWNLOADS]: The skill fetches data from well-known external web services to support its news monitoring functionality.
Evidence: Retrieves RSS feeds and JSON data from news.google.com, hn.algolia.com, and www.reddit.com.

public-relations